fa4a465faa39ae6218a5c6ee87c0db13_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4a465faa39ae6218a5c6ee87c0db13_mafia_JC.exe
Size

21.8MB
MD5

fa4a465faa39ae6218a5c6ee87c0db13
SHA1

8417a618d2d543807de30a8eac6788588420f09f
SHA256

0df9306c9de48e271a2971c4b1d2247450221d6a1a3fdfb90a37546e71a50818
SHA512

c7fe6b3dc015dbda8dd525e427cbc27b8816c1aa1b4f6e32a7b171e6a21fc9894ff08b2937a589a283981455a50620d30931c155ebf67288b075042a3068a802
SSDEEP

393216:jVsjGizFl8qkTxvaQwB8KpQAMnGVfqJSDigt+odseqI6LWtO9Xv8NI7kJ1pKA4G:jmPBAwBDpGG1q+btZdJ6LWAOK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4a465faa39ae6218a5c6ee87c0db13_mafia_JC.exe

Files

fa4a465faa39ae6218a5c6ee87c0db13_mafia_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 17.3MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE